StoxxPay Privacy Center

Important information: Argentina

The personal data subject has the right to exercise the right of access to his/her personal information free of charge at time intervals of at least six months, unless a legitimate interest is accredited according to Article 14, section 3 of Law No. 25.326 or, at any time, of removal or block of all or part of his/her personal information from the database by sending an email to privacy@stockbacking.com. THE AGENCY FOR ACCESS TO PUBLIC INFORMATION (AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA), in its role as the Control Body of Law No. 25.326, has the attribution to address complaints and claims that are brought by those who are affected in their rights by a breach of the current rules on the protection of personal data. 

Important information: Australia

StoxxPay is providing the following supplemental information for individuals whose personal information is collected or held by StoxxPay. or any of its Affiliates at a time when the collecting or holding entity has an 'Australian link' within the meaning of the Australian Privacy Law.

If you are one of those people, you can make a complaint to us about a breach of the Australian Privacy Principles using the contract details from StoxxPay's Privacy Notice. We will investigate your complaint and endeavor to resolve any issues to your satisfaction. If we do not adequately respond to your concerns, you have the right to submit a written complaint to the Australian Information Commissioner's Office.

Important information: Brazil

This supplementary privacy notice from StoxxPay provides the additional information required by Federal Law No. 13,709/2018 - General Data Protection Law of Brazil ("LGPD"). These provisions and statements in the StoxxPay Global Privacy Notice explain our practices with respect to Personal Information (term defined in the Global Privacy Notice) in Brazil.

Important information: Canada

StoxxPay collects, uses, and discloses Personal Information for the purposes identified in the StoxxPay Privacy Notice, and for any additional purposes, as required by law, with notice to you and your express or implied consent.  

You may be able to take advantage of the tool developed by the Digital Advertising Alliance of Canada to opt out of third-party advertising. Where available, this tool provides a list of parties that may target advertisements based on your online web-browsing activities and the ability to opt out of their use of your information for that purpose. To access the tool, visit https://youradchoices.ca/ 

Important information: Colombia

This document establishes the personal data treatment policies of natural persons at StoxxPay, in compliance with Law 1581 of 2012 "By which general provisions for the protection of personal data" and its regulatory decrees (or any other norm that regulates, adds, executes, complements, modifies, deletes, or repeals Law 1581 of 2012). 

Important information: European Economic Area (EEA)

StoxxPay is providing this supplemental privacy notice to give individuals in the European Economic Area (EEA), the United Kingdom (UK) and Switzerland the additional information required by the EU General Data Protection Regulation and the UK and Swiss equivalents. These provisions, which should be read together with the statements in the StoxxPay Global Privacy Notice explain our practices about data privacy in the EEA, UK, and Switzerland. 

重要な情報：日本

最終更新日：2019年8月23日
本個人情報保護指針（以下「本指針」）は、個人情報取扱事業者であるStoxxPay（以下、総称して「当社」）によるお客さまの個人情報の取り扱いについて規定したものです。

本指針は、個人情報の保護に関する法律（平成15年法律第57号）およびその政令・規則等（以下、総称して「個人情報保護法」）が該当する範囲において、当社がStoxxPayのwebサイト、ソーシャルメディアページまたはアプリケーション（以下「プラットフォーム」）上で収集する個人情報および当社 がその他の方法または情報源から収集する個人情報を対象に適用されます。　ただし、StoxxPay特定のサービス、webサイト、アプリケーション、プロモーション。イベント等において、別段のプライバシーポリシーまたは個人情報保護指針等が規定されている場合には、その別段の規定が適用されるものとします。 

個人情報の収集

当社は、当社の業務遂行に必要な範囲のみにおいて、適法かつ適正な方法によって個人情報を収集します。

個人情報の利用目的

お客様の個人情報は、以下の目的で利用します。

1.    お客様が参加を希望するプロモーション、キャンペーン、懸賞、イベント、コンテストなどを実施および管理するため。
2. 当社の製品およびサービス、広報活動、およびWebサイト、ソーシャルネットワークサービス、およびその他のさまざまなメディアを使用したマーケティング活動を宣伝するため。
3. ストックバッキング製品に関連する関連サービス（ストックバッキンググローバルカスタマーアシスタンスサービス、サービス、ストックバッキング.comに関連）ストックバッキング製品（StoxxPayクレジットサービス、およびStoxxPayブランドのその他のサービスと製品を含む。以下も同様）サービスおよびその他の関連するオファーの提供と運用。ただし、これらに限定されません。
4. StoxxPay製品発行者および加盟店との連絡および管理用
5. 各種お問い合わせ・ご要望に対する対応、ご質問への対応および当社からの連絡のため
6. 運用管理情報（利用規約の変更など）をお客様に送信するため
7. StoxxPayのストックバッキングサービスおよび関連会社/その他のサードパーティサービスについて通知するため（別途同意する場合）
8. データ解析、監査、新製品の開発、利用傾向の特定、当社のプロモーション・キャンペーン等の有効性の測定、当社のビジネス活動の実施および拡大のため 
9. ウェブサイトおよびプラットフォームの利用状況の分析・モニタリングおよび改善、プラットフォームのセキュリティ保護、不正利用の防止およびポリシーの施行のため 
10. StoxxPayプロダクトにかかる不正防止およびリスク管理のため 
11. 当社の法律上の権利の行使または義務の履行のため 
12. その他の業務の実施のため（別途ご同意いただいた場合 

個人データの共同利用

当社は、以下の場合に必要な範囲内でお客さまの個人データを共同して利用します。いずれの場合も、StoxxPayが、当該個人データの管理について責任を有するものとします。

1. 当社の日本国内外の関連会社（StoxxPay. およびその直接または間接の子会社をいい、StoxxPay Mexico &  Latin America (Bermerz S.A.P.I. de C.V.)を含みますがこれらに限りません。）との間で、上記２．に定める目的のため、お客さまの氏名、生年月日、住所、電話番号、お取引情報、お問合せ内容、Eメールアドレス、SNSアカウント等を共同して利用する場合
2. StoxxPayプロダクトの関連サービスにおいて、当該StoxxPayプロダクト発行会社との間で、当該関連サービスの管理運営、お客さまのお問合わせ対応またはお客さまのご連絡のために、お客さまの氏名、生年月日、住所、電話番号、パスポート番号またはその他の個人識別符号、お取引情報、お問合せ内容、Eメールアドレス等を共同して利用する場合
3. 他の会社（以下「パートナー」）と協力して上記２．(1)または２．(12)に規定するキャンペーンまたは事業等を実施する場合において、お客さまにこれらを提供し、または、かかるキャンペーンまたは事業等の統計分析をするために必要な範囲において、お客さまの氏名、カード番号、お取引情報、生年月日、住所、電話番号、Eメールアドレス、SNSアカウント等をパートナーと共同して利用する場合
4. StoxxPayプロダクトの発行会社、同提携会社、同加盟店契約会社、同加盟店等（以下「発行会社等」）と協力して、当該発行会社等のために上記２．(8)に規定するデータ解析、監査、新製品の開発、利用傾向の特定、プロモーション・キャンペーン等の有効性の測定および統計調査等を実施する場合において、かかる実施のために必要な範囲において、お客さまのカード番号、お取引情報、属性情報等を当該発行会社等と共同して利用する場合

個人データの第三者への提供

 当社は、以下の場合に必要な範囲内でお客さまの個人データを第三者に提供または預託します。

1. 上記２.の利用目的達成に必要な範囲内において、業務委託先に対し、個人データの取扱いを含む業務を委託する場合 
2. お客さまの依頼に基づくStoxxPayプロダクトの関連サービスの提供のため、お客さまの同意に基づきサービス提供会社（ホテル、レストラン、旅行代理店等）に対し個人データを提供する場合
3. 法律上の義務に従うため、または当社に送達された令状に従うのに必要な場合 
4. StoxxPay またはその利用者の法的権利や財産を保護したり擁護するのに必要な場合
5. 違法行為、詐欺が疑われる行為、個人の身体的安全を脅かす可能性のある状況について調査したり、防止を図ったり、措置を講じたりするのに必要な場合 
6. その他、お客さまに別途ご同意いただいた場合

本指針への同意

お客さまには、StoxxPayのWebサイトその他のプラットフォームにおいて個人情報を提供する際に本指針の条件に同意いただきます。未成年者のお客さまが個人情報を提供される場合には、必ず親権者の同意を得ていただくことを前提とします。

本指針は、StoxxPay がStoxxPayのWebサイトその他のプラットフォーム上で収集する情報および当社 がその他の方法または情報源から収集する情報に適用されます。

当社は本指針をいつでも変更する権利を留保します。StoxxPayがそのような変更をお客さまに直接お知らせした後や、一般のお客さまに向けてStoxxPayのWebサイトその他のプラットフォーム上に掲示した後も個人情報の提供を継続されますと、法令上許容される限りにおいて、お客さまはそれらの変更に同意されたことになります。

個報開示等

お客さまからお問い合わせを頂いた場合には、当社は皆様の保有個人データの利用目的の通知、保有個人データの開示、訂正、利用停止等にかかる手続について、お客さまにご案内いたします。お送りしたeメールまたはStoxxPayのWebサイト上に記載されている手順に従うか、ご要望を書かれた返信メールをお送りいただければ、個人情報保護法の規定に従い対応いたします。

本指針の変更

当初は随時、最新の個人情報保護指針を掲載することにより本指針を変更することができます。 

適用関係

本指針とのグローバルプライバシー通知の内容が矛盾抵触する場合においては、個人情報保護法の該当する範囲に限り本指針が優先しますが、その他はグローバルプライバシー通知の内容が適用されるものとします。

お問い合わせ

個人情報の取り扱い等について当社にご要望、ご質問またはお問い合わせがありましたら、下記の方法でご遠慮なくお知らせください。

Eメール: privacy@stoxxpay.com
Eメールには、口座番号などの機密情報は含めないでください。

郵送先：

StoxxPay Global Privacy Office 

388 Market Street, Suite 1300  

San Francisco, CA, 94111
USA 

Important information: Taiwan

All capitalized terms not defined herein shall have the same meaning as defined in the Global Privacy Notice. 

Other choices with your personal information

All capitalized terms not defined herein shall have the same meaning as defined in the StoxxPay Global Privacy Notice. In addition to the section of "Your Choices" as specified in the StoxxPay Global Privacy Notice, you may also request our provision of duplicate copies of your personal information, and/or to request that we cease to collect, process, or use your personal information. 

When your personal information may be used

Your personal information may be used during the longest of the following period: (a) the period when the purposes for collection of the personal information exist; (b) the mandatory record keeping period under applicable laws and regulations (e.g., Business Accounting Act of Taiwan); (c) the keeping period for StoxxPay's operation needs; or (d) the keeping period as agreed in relevant contract or agreement. 

Consent To the Collection, Processing and Use of Your Personal Information

Your personal information may be used in the territories or areas where persons authorized to use the personal information as specified in the StoxxPay Global Privacy Notice are located. You have been notified and are fully aware of the contents as specified above and in the StoxxPay Global Privacy Notice, and agree that StoxxPay may collect, process, use and internationally transmit your personal information in accordance with such contents.   

Important information: United States

Social Security Number Policy and Sensitive Personal Information Statement

StoxxPay collects U.S. Social Security numbers and other sensitive personal information in the ordinary course of its business. We have implemented reasonable technical, physical, and administrative safeguards to help protect sensitive personal information from unlawful use and unauthorized disclosure. All StoxxPay workers are required to follow these established safeguards, which include the following:

o Access to sensitive personal information is limited to those workers and service providers who have a need to access the information to perform tasks for StoxxPay. Sensitive personal information is only disclosed to third parties in accordance with StoxxPay established privacy and security policy.

o StoxxPay will only disclose sensitive personal information (1) to those service providers, auditors, advisors and/or successors in interest who are legally or contractually obligated to protect them, or (2) as required or permitted by law.

If you have any questions, please contact us at privacy@stoxxpay.com.

Important information: California Residents

StoxxPay provides this supplemental privacy notice to provide California residents with additional information required by the California Consumer Privacy Act (the “CCPA”) and other California laws.

At StoxxPay, we are committed to protecting the privacy and security of all personal information entrusted to us. StoxxPay has a Global Privacy Program to help ensure that your information is handled correctly and that your personal information is protected. It also reflects the requirements of privacy laws in all countries and states where StoxxPay operates. Our Global Privacy Notice describes our privacy and security practices in detail.

In the United States, the payment transaction information that StoxxPay collects when operating its credit networks is governed by existing federal financial privacy laws. The CCPA recognizes that such financial information is already protected by federal privacy law, so the CCPA does not apply to this information. StoxxPay's privacy program reflects the sensitivity of the financial and other information that we handle. If you have questions about how we handle your StoxxPay affiliate card details, please visit Additional Privacy Information, and review the section on Card Transaction Data.

Beyond financial information, StoxxPay collects certain information that is subject to the CCPA. The CCPA applies (1) to our marketing data, which we collect when consumers sign up for StoxxPay marketing, attend StoxxPay-sponsored events, or interact with our websites and apps, and (2) to information collected from individuals using StoxxPay (StoxxPay Services) and other StoxxPay secure credit service solutions. This supplemental privacy notice explains our practices for this information covered by the CCPA.

As a global credit services company, StoxxPay does many things. When we act as service providers for card issuers and merchants that are compatible with StoxxPay, we only collect and use personal information as authorized by our contracts with our customers. If you have questions about how these companies handle your personal information, or if you want to exercise your rights, please contact them directly. For example, if you have signed up for cash back or loyalty offers with your financial institution or a merchant, contact that company for more information.

CCPA Rights

The CCPA provides California residents with specific privacy rights, including the right to receive a privacy notice, the right to know what information we have collected about you in the past 12 months, and the right to know what categories of personal information we have shared with third parties. CCPA gives California residents the right to choose not to sell their personal information¹. CCPA also gives California residents the right to request deletion of their personal information. 

For the information that StoxxPay collects subject to the CCPA, this notice describes the categories of information we collect from California residents generally, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for commercial purposes. StoxxPay does not sell personal information. 

As described below, StoxxPay may share personal information with its affiliates² and service providers. We may also disclose personal information to third parties for business purposes as permitted by the CCPA, such as to our auditors, for compliance or security, or in connection with mergers and acquisitions. 

We may also share personal information with third parties based on your consent, such as if you sign up for a co-branded marketing program or if you explicitly agree to our use of third-party advertising cookies, as described in our Cookie Notice. 

¹ Personal information of children under 16 cannot be sold without affirmative consent. StoxxPay does not sell children’s information. 2StoxxPay’s Affiliates are companies that are directly or indirectly controlled by StoxxPay.—for example, StoxxPay Mexico & Latin America (Bermerz S.A.P.I. de C.V.). 

How to Exercise Your Rights

If you are a California resident, you may exercise your rights or authorize another person to act on your behalf by: 

Visiting our Privacy Rights Page

Email us: privacy@stoxxpay.com 

Please do not include sensitive information, such as your account number, in emails.

Mailing us a letter: 

StoxxPay Global Privacy Office 

388 Market Street, Suite 1300  

San Francisco, CA, 94111 

USA

Please note that we will need to verify your identity before we can fulfill your CCPA-related request. The information that we maintain is subject to CCPA generally consists of marketing information, we will generally verify your identity using your email address. We will respond to requests using the email address that is associated with the information we maintain. 

If you would like to designate an agent, please send an email from your own email address to privacy@stoxxpay.com indicating the name and email address of your agent. We will respond to that’s person’s requests using both your email address and the agent’s email address.

Please understand that your rights are subject to some limitations:

• For security reasons and to prevent unauthorized disclosure of personal information, cardholders should contact their payment card issuers to access their Card Transaction Data. This helps ensure that access to the information is only provided to the authorized individuals, subject to the issuer’s verification processes.
• CCPA provides that service providers should refer access and deletion requests to the companies with whom the individual has the direct relationship. In many cases, we act as a service provider for card issuers and merchants, including rewards networks. If you have questions about how your issuer or a rewards network handles your personal information, please check the privacy notices provided by these companies and contact them directly for assistance with your relevant privacy requests.
• CCPA also prohibits companies from including certain elements of sensitive personal information, such as payment card number, in their access reports, even if you have provided those data elements to use for marketing.
• If you request that we delete your personal information, we will do so except in those situations where our retention is required for our internal business purposes or otherwise permitted by CCPA (such as for fraud prevention or legal compliance). In these situations, we will retain your information in accordance with our records retention program and securely delete it at the end of the retention period.

Financial Incentives

StoxxPay collects personal information to deliver offers and promotions and to enable loyalty programs. While we cannot calculate the precise value of your information to us, our offers and incentives generally reflect the value of the relationships that we have with the individuals who participate in the program. We will not discriminate against you if you exercise your rights under CCPA. However, if you ask us to delete your information, you will not be able to receive additional offers or promotions for which the deleted information was needed for program participation. Any offers or promotions sent to you previously will continue to be honored according to their original terms.